Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: 01JdQlR7u1r+fCgYpPT/ElIuAWCZnPo9JzPvnaWGdpk=
Subject key identifier: 58:C7:D3:42:3F:25:9D:1B:37:65:49:CF:19:FD:E0:05:35:1F:7C:8A
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01976E86F25113B54EE465104492F75031DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 13:00:26 +0000
Manifest this update: Sat 14 Jun 2025 13:00:26 +0000
Manifest next update: Sun 15 Jun 2025 13:00:26 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: Myt+KjRgwIUCpyAS1jJaFZxD1CDFyArjJVztOHhrje0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:f2:51:13:b5:4e:e4:65:10:44:92:f7:50:31:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jun 14 13:00:26 2025 GMT
Not After : Jun 15 13:00:26 2025 GMT
Subject: CN=58c7d3423f259d1b376549cf19fde005351f7c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:f7:ae:58:60:30:58:c2:d4:6c:22:3f:42:
04:ee:f4:b3:3a:40:cd:ce:f9:d4:a1:ea:3d:e4:70:
98:40:58:67:6a:b0:fe:47:83:ab:ef:83:72:8c:40:
fe:2f:be:f3:c3:fb:40:70:38:c5:5a:67:51:96:1f:
08:30:e4:64:80:61:2c:cb:63:d3:f8:22:44:76:45:
23:57:1b:2c:b9:8d:51:70:15:ab:29:79:74:2f:f9:
7a:3f:72:f8:ee:a1:46:c6:22:c9:e2:52:ae:88:9c:
5c:11:63:8b:cf:47:17:49:f1:f8:14:68:35:74:7d:
61:7a:22:e0:c9:45:61:3a:9f:95:7f:d2:58:8f:1c:
54:64:f9:13:0c:f6:3c:28:50:a0:7d:a9:10:0b:9c:
4e:68:9c:0c:88:a9:62:25:51:9c:d1:e2:0f:b4:0d:
88:3e:b4:3a:fd:f5:bd:d1:78:4f:0d:08:43:ff:c6:
ed:dc:e1:a1:96:be:99:d9:45:07:e1:f6:ed:7d:68:
38:e1:80:05:93:bb:b9:7e:35:e9:2e:cb:01:a1:48:
88:55:c8:4d:fb:d7:32:ed:2f:72:02:7c:00:46:e9:
5e:ba:86:de:07:c9:60:da:5a:f0:60:84:51:a4:3f:
b2:f7:b7:f9:73:92:a2:99:5f:79:38:06:fa:f6:9f:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:D3:42:3F:25:9D:1B:37:65:49:CF:19:FD:E0:05:35:1F:7C:8A
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:eb:11:4a:97:35:e3:82:11:a6:89:6a:cd:a8:6d:33:e4:
2d:a8:04:00:81:c3:67:8e:ed:7a:c8:e3:5e:4e:0b:62:8e:dc:
c6:29:5e:32:d3:bb:d4:2b:b5:b6:6a:79:3e:bf:ac:c7:c3:dc:
f5:78:2c:fc:ab:df:cc:05:ab:ee:d4:67:eb:5b:74:40:c9:cf:
b3:37:76:2c:61:68:cc:7a:da:e1:9d:34:df:97:d2:8c:32:60:
b9:4c:25:39:c7:31:4b:be:36:48:68:a8:9f:cc:ac:90:75:20:
60:a3:63:7c:ce:f1:b6:bd:a9:dc:e0:fa:19:cd:80:f6:6d:f0:
5d:bc:a4:5d:a2:b7:8d:bb:1c:2a:ce:14:5f:28:d5:ea:2c:ce:
cb:13:5a:67:cc:26:11:13:52:5f:de:ef:62:2d:5a:b0:07:fe:
a1:89:6a:0b:32:db:56:31:58:37:23:43:a4:33:b9:a3:9e:70:
b0:df:9e:2c:29:94:95:a9:93:c3:5a:f4:d2:3f:60:b1:ae:be:
4e:66:f4:d1:31:e6:9d:98:92:6f:43:38:c4:a8:40:de:f3:40:
0d:d3:3f:2b:02:fc:53:90:12:b9:c8:e5:f6:bb:49:fa:12:49:
6d:77:db:91:f8:b3:db:a8:4e:17:95:83:c2:f9:25:3d:06:e7:
bc:32:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:12:52 2025 by rpki-client